I. Solution Overview

This solution addresses the needs of bank intranet network construction. It adopts a traditional three-layer architecture design. The core switch uses stacking technology to improve reliability. The upstream connects to a primary-backup firewall deployment. The firewall virtual system achieves security isolation and access control for office, management, and production areas. Different services are divided into different VPN instances on the core switch through VRF technology, achieving service isolation and flexible access control. The default route for different areas points to the firewall, then back to the core switch to access the exit branch network, ensuring network access security and controllability.

II. Solution Topology

1. Physical Topology

2. Logical Topology

III. Solution Features

• High Reliability:
  • The core switch uses stacking technology to achieve device redundancy and improve network reliability.
  • The firewall uses primary-backup deployment to ensure network security and avoid single points of failure.
• Security Isolation:
  • The firewall uses virtual system technology to logically isolate office, management, and production areas, achieving secure access control.
  • Different services are divided into different VPN instances on the core switch through VRF technology, achieving service isolation and flexible access control.
• Flexible Access Control:
  • The default route for different areas points to the firewall, then back to the core switch to access the exit branch network, ensuring network access security and controllability.
  • Firewall policies and VRF routing policies can be used to achieve flexible access control between different areas and different services.
• Easy Management:
  • Huawei devices support a unified network management platform, facilitating network management and maintenance.
  • Stacking technology simplifies network topology and reduces management complexity.

IV. Solution Advantages

• Meets Bank Intranet Security Requirements: Through firewall virtual systems, VRF technology, and other means, security isolation and access control between different areas and different services are achieved, meeting the security requirements of the bank's intranet.
• Improves Network Reliability: Core switch stacking and firewall primary-backup deployment technologies improve network reliability and ensure business continuity.
• Simplifies Network Management: Unified network management platform and stacking technology simplify network management and reduce maintenance costs.

V. Applicable Scenarios

This solution is suitable for bank intranet network construction and other industries and enterprises with high requirements for network security and reliability.